Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts.
2024/05/19 02:36:52 ignoring optional flag "sandboxArg"="0"
2024/05/19 02:36:52 parsed 1 programs
2024/05/19 02:36:52 executed programs: 0
[   55.083162][ T1992] loop0: detected capacity change from 0 to 2048
[   55.090978][ T1992] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   55.102201][ T1992] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   55.113257][ T1992] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   55.124219][ T1992] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   55.132007][ T1992] UDF-fs: Scanning with blocksize 512 failed
[   55.140895][ T1992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   55.196295][ T1581] ==================================================================
[   55.204614][ T1581] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240
[   55.211373][ T1581] Read of size 1 at addr ffff88806d417000 by task syz-executor.0/1581
[   55.219510][ T1581] 
[   55.221821][ T1581] CPU: 0 PID: 1581 Comm: syz-executor.0 Not tainted 6.1.91-syzkaller #0
[   55.230133][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   55.240548][ T1581] Call Trace:
[   55.243833][ T1581]  <TASK>
[   55.246758][ T1581]  dump_stack_lvl+0xf4/0x251
[   55.251353][ T1581]  ? nf_tcp_handle_invalid+0x2f3/0x2f3
[   55.256817][ T1581]  ? panic+0x3fe/0x3fe
[   55.260988][ T1581]  ? lock_acquire+0xbe/0x390
[   55.265847][ T1581]  ? read_lock_is_recursive+0x10/0x10
[   55.271385][ T1581]  ? __virt_addr_valid+0x139/0x260
[   55.276476][ T1581]  ? __virt_addr_valid+0x211/0x260
[   55.281644][ T1581]  print_report+0x15f/0x4f0
[   55.286122][ T1581]  ? __virt_addr_valid+0x139/0x260
[   55.291204][ T1581]  ? __virt_addr_valid+0x211/0x260
[   55.296308][ T1581]  ? crc_itu_t+0x178/0x240
[   55.300708][ T1581]  kasan_report+0x136/0x160
[   55.305275][ T1581]  ? crc_itu_t+0x178/0x240
[   55.309707][ T1581]  crc_itu_t+0x178/0x240
[   55.314033][ T1581]  udf_sync_fs+0x1bd/0x370
[   55.318423][ T1581]  ? udf_put_super+0x130/0x130
[   55.323164][ T1581]  ? dentry_kill+0xbb/0x1e0
[   55.327641][ T1581]  sync_filesystem+0xbf/0x180
[   55.332311][ T1581]  generic_shutdown_super+0x65/0x2c0
[   55.337938][ T1581]  kill_block_super+0x75/0xb0
[   55.342650][ T1581]  deactivate_locked_super+0x71/0xd0
[   55.347944][ T1581]  cleanup_mnt+0x2bd/0x330
[   55.352353][ T1581]  task_work_run+0x206/0x280
[   55.357034][ T1581]  ? task_work_cancel+0x2a0/0x2a0
[   55.362142][ T1581]  ? __x64_sys_umount+0xe4/0x120
[   55.367184][ T1581]  ? path_umount+0xc70/0xc70
[   55.371771][ T1581]  exit_to_user_mode_loop+0xa9/0xc0
[   55.377153][ T1581]  exit_to_user_mode_prepare+0x64/0xb0
[   55.382623][ T1581]  syscall_exit_to_user_mode+0x27/0x1b0
[   55.388174][ T1581]  do_syscall_64+0x47/0x80
[   55.392614][ T1581]  ? clear_bhb_loop+0x45/0xa0
[   55.397435][ T1581]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.403774][ T1581] RIP: 0033:0x7f8d6bc7dc87
[   55.409050][ T1581] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   55.429066][ T1581] RSP: 002b:00007ffdeacb0258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   55.437456][ T1581] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8d6bc7dc87
[   55.445694][ T1581] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdeacb0310
[   55.453945][ T1581] RBP: 00007ffdeacb0310 R08: 0000000000000000 R09: 0000000000000000
[   55.461903][ T1581] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdeacb13d0
[   55.470025][ T1581] R13: 00007f8d6bcd7c5a R14: 000000000000d706 R15: 0000000000000006
[   55.477974][ T1581]  </TASK>
[   55.480969][ T1581] 
[   55.483278][ T1581] The buggy address belongs to the physical page:
[   55.489660][ T1581] page:ffffea0001b505c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d417
[   55.499794][ T1581] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   55.507059][ T1581] raw: 00fff00000000000 ffffea0001adf448 ffffea0001b52248 0000000000000000
[   55.515843][ T1581] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   55.524432][ T1581] page dumped because: kasan: bad access detected
[   55.530823][ T1581] page_owner tracks the page as freed
[   55.536185][ T1581] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1910, tgid 1910 (modprobe), ts 54143429262, free_ts 54144301877
[   55.554489][ T1581]  post_alloc_hook+0x286/0x2b0
[   55.559234][ T1581]  get_page_from_freelist+0x2fdd/0x3170
[   55.565029][ T1581]  __alloc_pages+0x251/0x640
[   55.569613][ T1581]  __folio_alloc+0xf/0x30
[   55.574006][ T1581]  vma_alloc_folio+0x484/0x9e0
[   55.578762][ T1581]  handle_mm_fault+0x232f/0x4260
[   55.583939][ T1581]  exc_page_fault+0x22a/0x5e0
[   55.588712][ T1581]  asm_exc_page_fault+0x22/0x30
[   55.593565][ T1581] page last free stack trace:
[   55.598303][ T1581]  free_unref_page_prepare+0xd4b/0xee0
[   55.604431][ T1581]  free_unref_page_list+0x54b/0x7e0
[   55.609687][ T1581]  release_pages+0x175c/0x1900
[   55.614427][ T1581]  tlb_flush_mmu+0xe5/0x1d0
[   55.618903][ T1581]  tlb_finish_mmu+0xb0/0x1b0
[   55.623471][ T1581]  exit_mmap+0x341/0x730
[   55.627682][ T1581]  __mmput+0x9b/0x2d0
[   55.631717][ T1581]  exit_mm+0x122/0x1b0
[   55.635844][ T1581]  do_exit+0x81e/0x23a0
[   55.639970][ T1581]  do_group_exit+0x1b5/0x280
[   55.644549][ T1581]  __x64_sys_exit_group+0x3b/0x40
[   55.649545][ T1581]  do_syscall_64+0x3b/0x80
[   55.653935][ T1581]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.659803][ T1581] 
[   55.662110][ T1581] Memory state around the buggy address:
[   55.667729][ T1581]  ffff88806d416f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.675759][ T1581]  ffff88806d416f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.683791][ T1581] >ffff88806d417000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   55.691820][ T1581]                    ^
[   55.695878][ T1581]  ffff88806d417080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   55.703925][ T1581]  ffff88806d417100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   55.711960][ T1581] ==================================================================
[   55.720373][ T1581] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   55.728197][ T1581] Kernel Offset: disabled
[   55.732512][ T1581] Rebooting in 86400 seconds..